F:\Office\Target\x86\ship\postc2r\x-none\wordconv.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2a2c3127828ec751d68fe95d6d1f9ecc_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2a2c3127828ec751d68fe95d6d1f9ecc_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
2a2c3127828ec751d68fe95d6d1f9ecc_JaffaCakes118
-
Size
2.0MB
-
MD5
2a2c3127828ec751d68fe95d6d1f9ecc
-
SHA1
073e5d40426944c6e8f1e951524b2ab34234de59
-
SHA256
8a91cd8cbc6c97766bbbb7dab73db71183494758fdc7f2e967f61ccbf26452e4
-
SHA512
e6c089d915e9918102dba8f5c067de2c623199553b2448fba3b7e3ee628ec794a7bab83def1be883c3e029ca645fc6020b28fe82cac291446a7d421e9a32321b
-
SSDEEP
12288:r12wuwWBwiJ58uQctWdh9MZzUNjgmnoIF2dnZ0Ot6xA0pzbK1KdYVjpOVgNxbkI:cw88uQT9++hbF2dZXIBzwKdYVjp17
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a2c3127828ec751d68fe95d6d1f9ecc_JaffaCakes118
Files
-
2a2c3127828ec751d68fe95d6d1f9ecc_JaffaCakes118.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.c2r Size: 512B - Virtual size: 260B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ